Privacy Policy

Last updated: 9 September 2026

This policy explains what personal data SpotU holds about you, why we hold it, who helps us process it, and the control you have over it.

What we collect

  • Account details — your email address and password (stored only as a secure hash), and your display name.
  • Profile information — your bio or "about me" text, profile picture, headline, location, skills, experience, website and any CV you choose to upload.
  • Content you upload — your videos and audio, plus their metadata such as title, description, category, thumbnail and upload date.
  • Activity on the site — saves, ratings, comments, messages you send, and view counts.
  • Technical data — IP address, browser and device type, approximate location derived from IP, and cookie identifiers.

Why we collect it

To create and secure your account, to show your profile and uploads to the people you want to reach, to host and stream your media, to run search and discovery features, to let members message each other, and to keep the platform safe by handling reports and abuse.

Our lawful bases are performance of our contract with you (running the account and its features), our legitimate interests (security, moderation, improving the service), and your consent where we ask for it, such as non-essential cookies.

Who processes your data for us

  • Supabase — database, authentication and file storage. Holds your account record, profile, and uploaded files such as profile pictures and CVs.
  • Mux — video and audio hosting, encoding and streaming. Holds your uploaded media and playback data.

These providers act on our instructions under data processing agreements. Some processing may take place outside the UK, protected by appropriate safeguards such as standard contractual clauses.

We do not sell your data

SpotU does not sell your personal data to third parties, and does not share it for third-party advertising. We only share data with the processors named above, or where we are legally required to — for example a lawful request from the police, or a report we must make to protect a child.

Cookies

We set essential session and login cookies so that signing in works and stays working between visits, and a small cookie to remember your cookie choice. These are required for the site to function.

Any non-essential cookies — for example basic analytics to understand which pages are used — are only set if you accept them in the banner shown on your first visit. You can decline and the site will work exactly the same. Clearing your browser storage will make the banner appear again so you can change your mind.

How long we keep it

We keep your account data while your account is open. If you delete your account, your profile and uploads are removed, with backups clearing shortly afterwards. We may retain a minimal record of serious rule-breaking, such as a ban, to stop repeat accounts.

Your rights under UK GDPR

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to have your data deleted, to restrict or object to certain processing, and to receive a copy of your data in a portable form. You can also withdraw consent for non-essential cookies at any time.

To exercise any of these rights — including deleting your account and data — email support@spotu.co.uk. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk. We would appreciate the chance to put things right first.

Changes to this policy

We may update this policy as SpotU develops. The "last updated" date at the top will change, and we will highlight significant changes on the site.

Contact

Privacy questions and data requests: support@spotu.co.uk. See also our Terms of Service.